svn commit: lorikeet r699 - in trunk/heimdal: . cf doc kdc kuser lib/asn1 lib/des lib/des/imath lib/gssapi lib/hdb lib/hx509 lib/hx509/data lib/krb5 lib/roken tests tests/kdc

[Andrew Bartlett]

On Wed, 2007-01-10 at 21:51 +0100, Love Hörnquist Åstrand wrote:
> > Yes, if this was an AS-REQ for a service directly, not for the the
> > krbtgt, then we would should lookup the krbtgt key separately, to fill
> > that in.
> 
> What inital ticket services needs the PAC ? Does even the Windows KDC  
> fill in the
> PAC for non krbtgt AS requests ?

I've not checked, but if a service was set to require an initial tgt, I
presume this is how it should operate.  I suspect we need some tests...

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20070111/7969cf2d/attachment.bin